CVE-2026-62908

HighCVSS 7.0

Published: 11/08/2026(UTC)Updated: 16/08/2026(UTC)Translated: 11/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

Summary

Concurrent execution using shared resource with improper synchronization (race condition) in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker could exploit race conditions to gain higher privileges, potentially leading to system and data integrity compromise.

Recommendation

Install the latest Windows updates and restrict access to the backup service.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.